CWE-287

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network acces

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network acces

BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to

The TIBCO Spotfire authentication component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketpla

Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can le

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows a

Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and

In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as o

A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remot

A vulnerability in the session management functionality of the web-based interface for Cisco Small Business RV320 and RV

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface t

In firmware version MS_2.6.9900 of Columbia Weather MicroServer, an authenticated web user can access an alternative con

In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due

The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication a

Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash valu

iDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass authentication to access the

An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. A user without valid credentials can by

cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests (SEC-93).

Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code ex

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user co

Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may

Huawei smartphones with versions earlier than Taurus-AL00B 10.0.0.41(SP2C00E41R3P2) have an improper authentication vuln

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently

D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP

An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A use

A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login i

A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing t

WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow a

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, bec

A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions

A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any pa

A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software c

Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the atta

etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-b

A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mel

When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any mal

The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that the

The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element

The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on

The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validati

Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allow

An improper authentication vulnerability can be exploited through a race condition that occurs in Ellucian Banner Web Ta

The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to g

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanCha

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W

An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for l

A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain

An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe com

An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if